Setup of Single Sign-On

You can use Microsoft Entra ID to log into SEMINE via Single Sign-On (SSO).
The following outlines the steps required to setup SSO accurately using Microsoft Entra ID with SEMINE.

• Select "Edit organization" in the Admin panel in Semine.
  
  
  
  
• Then select the Single Sign-on Setup tab.
  
  
  • Enabled - Activate Single Sign-On.
  • Display Name : Choose the display name for the login button.
  • Tenant ID: Provided by customer's IT department/Partner.
  • Application ID: Provided by customer's IT department/Partner.
  • Callback Path: [unique and predetermined] Set a unique Callback Path in the customer's Entra setup.
  • Optional: Restrict login to SSO only
  • Domain name: Set the domain name to customer's domain(s) (e.g.,domainName1.com, domainName2.com)

Microsoft Entra ID

Typically, your IT department or operating partner, responsible for managing O365/Entra, handles these tasks.

App Registrations



Go to Register an Application

• Name : SemineSSO
• Supported Account Types : Select: Accounts in this organizational directory only .
• Redirect URI : Retrieve from the SSO tab in Semine, specifically from the Callback-Path field.

Overview

Semine requires the following two values, and you need to input them into the Semine interface:

• Application (client) ID - Enter this into the field labeled Application Id
• Directory (tenant) ID - Enter this into the field labeled TenantId / Authority

Certificates & Secrets

• Click on Certificates & Secrets
• Then on New client secret
  
  

Create a New Client Secret
Generate a new client secret with the following details:

• Description: SemineSSO
• Expires: Optional, based on the customer's preference.

Click Add



It should now appear as follows:

Then select Token configuration

• Click on Add optional claim
• Token Type: Select ID and then select e-mail

In the next dialog box, check the following and then click Add

• Go to Authentication : 
  • Check the box for Id Tokens
  • Select "Yes" on enable the following mobile and desktop flows

• Once you've saved the values in the SSO tab for Semine, SSO will be activated by a nightly job. Please inform [e-mail] if SSO is not working the day after your SSO setup is finished, or if activation is time critical and we need to do this manually.  
• Once confirmation of activation is received, you can sign in by clicking the button with your chosen name.